Re: [Freeipa-devel] Ticket #2293 - permission attribute check

2012-04-27 Thread Rob Crittenden
Ondrej Hamada wrote: On 04/27/2012 02:36 PM, Martin Kosek wrote: I revisited ticket #2293 after it failed QE check. After some considerations, I think we should revert this type of check for permissions. Here is my reasoning: 1) This check fails when the target type does not have all its possib

Re: [Freeipa-devel] Ticket #2293 - permission attribute check

2012-04-27 Thread Dmitri Pal
On 04/27/2012 11:52 AM, Ondrej Hamada wrote: > On 04/27/2012 02:36 PM, Martin Kosek wrote: >> I revisited ticket #2293 after it failed QE check. After some >> considerations, I think we should revert this type of check for >> permissions. Here is my reasoning: >> >> 1) This check fails when the tar

Re: [Freeipa-devel] Ticket #2293 - permission attribute check

2012-04-27 Thread Ondrej Hamada
On 04/27/2012 02:36 PM, Martin Kosek wrote: I revisited ticket #2293 after it failed QE check. After some considerations, I think we should revert this type of check for permissions. Here is my reasoning: 1) This check fails when the target type does not have all its possible objectclasses defin

[Freeipa-devel] Ticket #2293 - permission attribute check

2012-04-27 Thread Martin Kosek
I revisited ticket #2293 after it failed QE check. After some considerations, I think we should revert this type of check for permissions. Here is my reasoning: 1) This check fails when the target type does not have all its possible objectclasses defined in the LDAPObject, like when users or hosts